TITLE 

Method and Apparatus for Restricting the Assignment of VLANs 

This application claims priority under 35 U.S.C. §119 (e) for 
5 provisional application number 60/228,102 filed on August 26, 
2000. 

Background of the Invention 

Telecommunications (telecom) systems are carrying increasing 
amounts of information, both in long distance networks as well as 

10 in metropolitan and local area networks (MAN/LAN) . At present, 
data traffic is growing much faster than voice traffic, and 
includes high bandwidth video signals. In addition to the 
requirement for equipment to carry increasing amounts of telecom 
traffic there is a need to bring this information from the long 

15 distance networks to businesses and to locations where it can be 
distributed to residences over access networks. 

The equipment, which has been developed to carry large 
amounts of telecom traffic, includes fiber optic transport 
equipment that can carry high-speed telecom traffic. The data 
20 rates on fiber optic systems can range from millions of bits per 
second (Mb/s) to billions of bits per second (Gb/s) . In 
addition, multiple wavelengths of light can be carried on an 
optical fiber using Wavelength Division Multiplexing (WDM) 
techniques . 

25 The use of optical fibers allows large amounts of telecom 

traffic to be transported over long distances. However, as one 
of ordinary skill in the art would recognize, it is impossible to 
have direct connections from each device sending data to each 
device receiving data. Moreover, some of the data being 

30 transmitted from a particular device may be intended for an 
intermediate point while other data is destined for a final 
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point. Furthermore, the intermediate point may also wish to 
transmit data to the final point. The optical fibers provide a 
high-speed data stream (pipeline) upon which to transmit data 
traffic from a plurality of devices to a plurality of other 
5 devices. 

Thus, telecom networks utilize network elements (NEs) that 
act as nodes in the transportation of data. The nodes may be 
nothing more than an intermediate point for data, may be a 
destination point for data, or may be a point where data is added 
10 to and removed from the data stream. NEs capable of providing 
this functionality, adding and removing traffic, are referred to 
as "add-drop" multiplexers (ADMs) . 

ADMs include multiple interface cards which receive high- 
speed data streams, create a time division multiplex (TDM) signal 

15 containing the multiple data streams, and route the time division 
multiplex signal to a cross-connect unit which can disassemble 
the data streams, remove or insert particular data streams, and 
send the signal to another interface card for transmission back 
into the networks. Because the multiple data streams are 

20 aggregated into a TDM data signal, the data rate of the TDM 
signal is by definition several times the maximum data rate 
supported by the interface cards. 

Standardized interfaces and transmission hierarchies for 
telecom signals have been developed and include Pleisochronous 

25 Digital Hierarchy (PDH), Synchronous Digital Hierarchy (SDH), and 
Synchronous Optical Network (SONET) . In addition to these 
telecom transport standards, standards have been developed for 
interconnecting businesses and computers within businesses. 
These Metropolitan and Local Area Network (MAN /LAN) standards 

30 include Ethernet, Gigabit Ethernet, Frame Relay, and Fiber 

Distributed Data Interface (FDDI) . Other standards, such as 
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Integrated Services Digital Network (ISDN) and Asynchronous 
Transfer Mode (ATM) have been developed for use at both levels. 

Fig. 1 illustrates a simple telecommunications network 100 
consisting of first and second computers 110, 112. The first 
5 computer 110 is connected to a first NE 120, and the second 

computer 112 is connected to a second NE 122. The first and the 
second NEs 120, 122 are connected together with links 130, 132, 
wherein the links may be fiber optic cables. That is, the links 
130, 132 form pipelines between the NEs 120, 122. However, the 

10 two links 130, 132 form a layer-2 forwarding loop that renders 
the telecom network 100 inoperable. That is, each NE 120, 122 
will continually transmit data over both links 130, 132 and 
respond to the receipt of data over both links 130, 132. 
Eventually, the amount of excess traffic created by this 

15 situation floods the network 100 with traffic. One way to 

prevent the layer-2 forwarding loop is to use spanning tree for 
the telecom network 100. 

As one of ordinary skill in the art knows, spanning tree is 
a standard bridge-to-bridge protocol used to prune a network into 

20 a tree by putting redundant links in "blocking" (sleeping) mode. 
Spanning tree is defined in IEEE Standard 802. ID, which is herein 
incorporated by reference. The blocked link would not forward 
traffic unless the working (non-blocked) link is lost. For 
example, if the first link 130 was the first link to transfer 

25 data between the NEs 120, 122, the second link 132 would 
effectively be blocked. 

As one of ordinary skill in the art would recognize, there 
may be multiple links between two NEs for a specific reason other 
than redundancy. For example, a first link between NEs may 
30 provide a pipeline with a first data rate, such as OC-48, and the 
second link may provide a pipeline with a second data rate that 
is higher than the first data rate, such as OC-192. As would be 
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obvious to one of ordinary skill in the art, the higher-speed 
connections cost more than the lower speed connections. As such, 
some customers may only pay for connections of the first data 
rate while other customers may pay for the higher data rate 
connection. 

Thus, there is a need to separately identify the different 
links between NEs. The current and preferred method for 
differentiating links between NEs is to assign each unique link 
to a different virtual LAN (VLAN) . Cur rent NEs_ support the 
assignment of \fLANs to the links_of the NE. The operation of 
VLAN NEs is defined in IEEE Standard 802. 1Q, which is herein 
incorporated by reference, but is not admitted to be prior art. 

Fig. 2A illustrates a telecom network 200 that includes 
first, second, third, and fourth computers 210, 212, 214, 216. 
The first and second computers 210, 212 are connected to a first 
NE 220, and the third and fourth computers 214, 216 are connected 
to a second NE 222. The first and the second NEs 220, 222 are 
connected together with links 240, 242, wherein the links are 
preferably fiber optic cables but may be copper cables or other 
type of cables capable of transmitting data at high speeds. The 
first link 240 supports OC-192 data streams while the second link 
242 supports only OC-48 data streams. The first link 240 is 
identified as VLAN -A and the second link 242 is identified as 
VLAN-B. 

Some customers may require the speed of an OC-192 pipeline 
while others may only require, or be able to justify the cost of, 
an OC-48 pipeline. The pipeline used by the customers will 
depend on the services provided by the customers. That is, each 
customer will select a link that provides an acceptable data rate 
at an acceptable price. 

For example, as illustrated in Fig. 2B, a first customer 250 
might use the first computer 210 and the third computer 214, and 
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a second customer 252 may use the second computer 212 and the 
fourth computer 216. The first customer 250 uses the first link 
240 that provides the OC-192 data rate, while the second customer 
252 uses the second link 242, supporting OC-48 communications. 
To differentiate the two links, the first link is identified as 
VLAN-A 260 and the second link is identified as VLA N-B 2 62 . 
Thus, when data is transmitted by the first customer 250 (to/from 
the first computer or the third computer 210, 214), the data will 
be transmitted over the first link 240 identified as VLAN-A 260. 
Likewise, when data is transmitted from' the second customer 252 
(to/from the second computer or the fourth computers 212, 216), 
the data will be transmitted over the second link 242 that is 
identified as VLAN-B 262. 



If af^single spanning tree protocol is used between the two 
NEs of Fig. 2B, the spanning tree protocol will assume that there 
is a forwarding loop and 'block one of the links% In fact, there 



solution is to run two separate spanning tree protocols between 
the NEs. That is, run a separate spanning tree protocol for each 
link, since each link is associated with a separate VLAN. Stated 
alternatively, a separate spanning tree is run for each VLAN, 
since each VLAN is associated with a separate link. Thus, each 
spanning tree only sees a single link (as opposed to a ^J-oop) and 
does not block any of the traffic inadvertently. 

However, a typical telecom network is not as simple as that 
illustrated in Figs. 1-2. The typical telecom network will 
consist of multiple NEs and multiple links between the NEs. Each 
of the links will have data from various sources being 
transferred over it. 

For example, Fig. 3A illustrates an exemplary telecom 
network 300 that consists of two NEs (NE1, NE2) and three links 
(310, 312, 314) therebetween , and provides communications 




is not a forwarding loop as each link is a different VLAN. The 
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between two sets of customers (CI, C2) . NE1 connects to CI 320 
and C2 330 and NE2 connects to CI 322 and C2 332. CI 320 and C2 
322 communicate over links 312, 314, which are both designated as 
VLAN-A. Therefore, one of the links 312, 314 would be blocked 
5 when running spanning tree on VLAN-A so as to prevent a layer-2 
forwarding loop. C2 330 and C2 332 communicate over links 310, 
312, which are both designated as VLAN-B. Therefore, one of the 
links 310, 312 would be blocked when running spanning tree for 
VLAN-B. 

10 The telecom network 300 illustrates a situation where link 

QX2y±s designated as bot^h^VLAN- A and VLAN-B. IEEE standard 
802. 1Q does not^ provide a standard for assigning spanning tree 
protocols to such arbitrary topologies. The assignment of 
s panning _tree protocols is normally a function (left: to the 

15 individual deployer of an NE. As one of ordinary skill in the 

art would recognize, this assumes expertise and diligence on the 
part of the user. Moreover, there is no standard for handling 
the assignment of multiple VLANs to a single link, which is 
likely to be a common occurrence (as is the case with the telecom 

20 network of FIG. 3A) . 

This type of mismatch topology leaves a network operator 
with a dilemma. If the network operator runs a separate spanning 
tree for each different ^/LAN assignment, then none of the links 
would be blocked as each link has a different VLAN assignment 

25 (310 - VLAN-A, 312 - VLAN-A^B, and 314 - VLAN-A). Furthermore, 
if the network operator ran the same spanning tree on links 310, 
312 (i.e., same spanning tree for VLAN-B and VLAN-A/B) it is 
possible that a VLAN-A layer-2 forwarding loop would remain if 
link 310 was put in blocking mode. Alternatively, if the network 

30 operator ran the same spanning tree on links 312, 314 (i.e., same 
spanning tree for VLAN-A and VLAN-A/B) it is possible that a 
VLAN-B layer-2 forwarding loop would remain if link 314 was put 
in blocking mode. 

Patent Application -6- TPL 124 




As an additional example Fig. 3B illustrates an exemplary 
telecom network 350 that consists of six NEs (NEs 1-6) and six 
links 352, 354, 356, 358, 360 therebetween. Four distinct 
network circuits (NCI - NC4) are defined in the telecom network 
5 350. NCI connects NE1, NE2, and NES; NC2 connects NE2, NE3 and 
NE6; NC3 connects NE4, NE3, and NES; and NC4 connects NE2, NE3 
and NES. The links of NCI are assigned as VLAN-A, the links of 
NC2 are assigned VLAN-B, the links of NC3 are assigned VLAN-c, 
and the links of NC4 are assigned VLAN-D. This leaves a topology 
10 where the links have the following VLAN assignments. 



Links 


VLAN 


352 


A v 


354 


A/D 


356 


B/D £ 


358 


C/D y\) 


360 


C 


362 


B ^| / 



J 



As illustrated, NC4 is a loop that needs to properly have 
spanning tree performed so as to prevent a layer-2 forwarding 
loop. However, each of the links 354, 356, 358 of NC4 is 
15 transmitting data in addition to the data associated with NC4 . A 
network operator is burdened with attempting to figure out how to 
effectively run spanning tree so as to prevent a layer-2 
forwarding loop at the same time as not inadvertently blocking an 
active path. 

20 For example, if the operator assigned a separate spanning 

tree to each unique set of VLANs, the loop would not be blocked 
as each of the links within the loop have different VLAN 
assignments. Alternatively, if the operator assigned each link 
associated with NC4 the same spanning tree, one^ of the links 354, 

25 356, 358 (forming the loop) would be blocked. Blocking one of 
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these links will inadvertently block NCI, NC2, or NC3 data being 
transmitted over that link. 

Thus, there is a need for a method and apparatus for 
restricting the assignment of VLANs . The method and apparatus 
5 needs to prevent d if f ere nt^NCs from being assigned VLANs that 

will either create a loop or prevent a loop from being able to be 
properly jlocked^without inadvertently blocking a link of another 
NC. If the assignment of VLANs is properly implemented, then a 
single conventional spanning tree can be run for the each unique 
10 VLAN to ensure that there are no layer 2 forwarding loops while 
at the same time not inadvertently blocking the path of another 



apparatus and network device for res trict ing the assignment of 
VLANs so that unique VLAN or set of VLANs must be assigned to 
each link for a particular network circuit (NC) or group of NCs. 
NCs are prevented from being a ssignd a particular VLAN if the 

20 addition of the VLAN assignment will create a mix-match topology, 
which may either create a loop or prevent a loop from being able 
to be properly blocked without inadvertently blocking a link of 
another NC. The method and apparatus (i.e., restriction of VLAN 
assignment) allow a single conventional spanning tree to be run 

25 to ensure that there are no layer 2 forwarding loops exist while 
at the same time not inadvertently blocking the path of another 
NC. 

According to one embodiment, a method, computer program and 
apparatus for receiving information regarding creation of a 
30 network circuit is disclosed. The method includes receiving 

information regarding assignment of a test VLAN to the created 
network circuit. Provisioning data including presence of other 



NC. 



Summary of the Invention 



15 



The present invention discloses a method, computer program, 
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network circuits and assignments of VLANS to the other network 
circuits is retrieved. A d^ejbe rm ina t ion is made if the test VLAN 
intersects entirely with any of the other assignedJ^LANs and if 
the test VLAN is di-stinct from all the other assigned_VLANs . A 
determination is made if the test VLAN is acceptable based on the 
determining if the test VLAN inte rsects entirely^and the 
determining if the test VLAN i's' distinct^ 

According to one embodiment, a method and computer program 
for defining a new network circuit for the network element is 
disclosed. The method includes assigning a test VLAN to the /new) 
network circuit. Assignments of VLANs to other defined network 
circuits associated with the network element is determined and a 
spanning tree is associated to the test VLAN if the test VLAN 
inter^e^Syentirely with one of the other VLANs, wherein the 
assigned spanning tree will be identical to a spanning tree 
associated with the one of the other assigned VLANs. 

According to one embodiment, a method and computer program 
for defining a new network circuit for the network element is 
disclosed. The method includes assigning a test VLAN to the new 
network circuit. Assignments of VLANs to other network circuits 
associated with the network element is determined. A new 
spanning tree is associated to the test VLAN if the test VLAN is 
completely ^distinct from all of the other VLAN assignments. 

According to one embodiment, a network device for preventing 
a network from having a topology with partially intersecting 
VLANs is disclosed. The network device includes a memory and one 
or more network interfaces. The network device also includes a 
processor configured to perform the steps of defining a new 
network circuit for the network device, assigning a test VLAN to 
the new network circuit, determining assignments of VLANs to 
other network circuits associated with the network device and 
determining if the test VLAN is acceptable. 
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These and other features and objects of the invention will 

be more fully understood from the following detailed description 

of the preferred embodiments, which should be read in light of 
the accompanying drawings. 

Brief Description of the Drawings 

The accompanying drawings, which are incorporated in and 
form a part of the specification, illustrate the embodiments of 
the present invention and, together with the description serve to 
explain the principles of the invention. 

In the drawings: 

FIG. 1 illustrates a simple telecommunications (telecom) 
network consisting of a single network circuit; 

FIG. 2A illustrates a simple telecom network consisting of 
two network circuits; 

FIG. 2B illustrates users and VLAN assignments for the 
telecom network of Fig 2A; 

FIGs. 3A and 3B illustrate telecom networks having multiple 
VLANs assigned to links; 

FIG. 4A illustrates a block diagram of the flexible cross- 
connect system, according to one embodiment; 

FIG. 4B illustrates a functional diagram of the flexible 
cross-connect system, according to one embodiment; 

FIG. 4C illustrates the mechanical (rack) configuration of 
the flexible cross-connect system, according to one embodiment; 

FIG. 5 illustrates a flowchart of a method of the current 
invention, according to one embodiment; 

FIG. 6A-6D illustrates addition of network circuits to a 
network element, according to one embodiment; and 



Patent Application 



-10- 



TPL 124 



FIG. 7 illustrates addition of network circuit to a network 
element, according to one embodiment. 

Detailed Description 

of the Preferred Embodiments 

In describing a preferred embodiment of the invention 
illustrated in the drawings, specific terminology will be used 
for the sake of clarity. However, the invention is not intended 
to be limited to the specific terms so selected, and it is to be 
understood that each specific term includes all technical 
equivalents that operate in a similar manner to accomplish a 
similar purpose. 

With reference to the drawings, in general, and FIGS. 4 
through 7 in particular, the apparatus and method of the present 
invention are disclosed. 

Numerous telecommunications (telecom) and networking 
standards, including the following that are incorporated herein 
by reference, are used to transport data. 

• Bellcore Standard GR-253 CORE, Synchronous Optical 
Network (SONET) Transport Systems: Common Generic 
Criteria, Issue 2, December 1995; 

• Bellcore Standard GR-1400 CORE, SONET Uni-directional 
Line-Switched Ring Equipment Generic Criteria; 

• Bellcore Standard GR-1230 CORE, SONET Bi-directional 
Line-Switched Ring Equipment Generic Criteria, Issue 
3A, December 1996; 

• Bellcore TR-NWT-0004 96, SONET Add-Drop Multiplex 
Equipment (SONET ADM) Generic Criteria, Issue 3, May 
1992; 
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Bellcore Transport System Generic Requirements FR-440, 
Issue No. 98, September 1998; 



Networking Standards, by William Stallings, published 
by Addison-Wesley Publishing Company (New York, 1993); 



IEEE/ANSI Standard 802.3, Ethernet LAN specification; 



• IEEE Standard 802. ID bridge-to-bridge protocol; and 

• IEEE Standard 802. 1Q, VLAN-aware bridges. 

When a new Network Element (NE) is installed in a 
telecommunications (telecom) network, it will be connected to 

10 various links, such as fiber optic cables, from other NEs. The 
NE will likely consist of a plurality of interface cards, a 
control unit and a cross-connect. The interface cards are likely 
to be a combination of telecom cards, for communicating with the 
telecom network, and data cards for communicating with devices 

15 connected either directly to the NE or connected to the NE 

through a Metropolitan or Local Area Network (MAN/LAN) . The 
control unit controls the operation of the NE and the cross 
connect routes data streams from one card to another so that the 
data streams are transmitted to the appropriate places within the 

20 telecom network. It can thus be said that the NE is a flexible 
cross-connect system. 

FIG. 4A illustrates a block diagram of a NE capable of 
routing traffic across two high-bandwidth planes. The NE 
includes a telecom plane 400, such as a SONET plane, and a data 

25 plane 410. The telecom plane 400 includes network interface 

subsystems 430, and the data plane 410 includes network interface 
subsystems 440. A centralized fully non-blocking cross-connect 
unit (XC) 420 is located in the telecom plane 400, which 
interfaces with the network interface subsystems 430 and the 

30 network interface subsystems 440. 
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Standardized telecom traffic, such as SONET, Synchronous 
Digital Hierarchy (SDH), Pleisochronous Digital Hierarchy (PDH), 
or other Time Division Multiplexed (TDM) or Wavelength Division 
Multiplexed (WDM) traffic, enters the system through the network 
interface subsystems 430, such as electrical or optical interface 
subsystems. The telecom traffic is transmitted from the network 
interface subsystems 430 over point-to-point connections 450 to 
the XC 420. The XC 420 processes the telecom traffic and then 
transmits the processed data back to a telecom network, such as a 
Wide Area Network (WAN) , or transmits the processed data to a 
data network, such as a Metropolitan or Local Area Network 
(MAN/LAN) . The processed data is transmitted to the telecom 
network via the network subsystem (s) 430, and to the data network 
via the network interface subsystem (s) 440. 

Standardized data traffic, such as Ethernet, enters the 
system through the network interface subsystems 440, such as 
electrical or optical interface subsystems. The network 
interface subsystems 440 communicate with the XC 420 via point- 
to-point connections 450. The data plane 410 also allows for 
communications between network interface subsystems 440 via 
point-to-point connectors 460. Thus, the data traffic can be 
processed by multiple interface subsystems 440 before being 
transmitted to the XC 420 or back to the data network. As with 
the telecommunication traffic, the XC 420 processes the data 
traffic and transmits the processed data to a telecommunication 
network or a data network. 

According to one embodiment, as illustrated in FIG. 4B, 
specific network interface subsystems are designated as high- 
speed interface subsystems 405 and others are designated as low- 
speed interface subsystems 415 having corresponding high-speed 
connections 435 and low-speed connections 445 to the XC 420. For 
example, the low-speed interconnections 445 may operate at the 
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STS-48 rate of 2.488 Gb/s, while the high-speed interconnections 
435 may operate at the STS-192 rate of 9.953 Gb/s. 

The high speed network interface subsystems 405 may be 
realized as printed circuit boards containing active and passive 
5 electrical and optical components, and may contain multiple 

network interfaces 402 operating at the same or different speeds. 
The low speed network interface subsystems 415 may also be 
realized as printed circuit boards with active and passive 
electrical and optical components, and can contain multiple 
10 network interfaces 402 operating at the same or different speeds. 
As an example, a low speed network interface subsystem 415 can be 
realized as a DS-1 interface board supporting 14 DS-1 interfaces. 
^ Alternatively, a low speed network interface subsystem 415 can be 

iJJ realized as an Ethernet board supporting multiple Ethernet 

i J 15 interfaces. 

'*? i 

u 

FIG. 4C illustrates the NE as a rack with card slots. The 
^ plug-in cards are grouped into two general groups. The first 

group is the common equipment cards, which include a XC card 442, 

a redundant XC card 444, a TCC card 4 32, a redundant TCC card 
ry 20 434, and a Miscellaneous Interface Card (MIC) 452. The second 
=j group is the network interface cards and includes low speed cards 

Q 422 and high speed cards 412, which form the telecommunication 

plane network interface subsystems 430 and the data plane network 

interface subsystems 440. 

25 A master architecture of a flexible cross-connect system is 

defined in co-pending U.S. Application number 09/274,078 filed 
entitled "Flexible Cross-Connect with Data Plane" filed on March 
22, 1999. The basic software architecture of the flexible cross- 
connect system is disclosed in co-pending U.S. Application number 

30 09/533,421 entitled "Method and Apparatus for Controlling the 

Operation of a Flexible Cross-Connect System" filed on March 22, 
2000. The basic timing operations of the flexible cross-connect 
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system are disclosed in co-pending U.S. Application number 
09/532,611 entitled "Method and Apparatus for Routing 
Telecommunication Signals" filed on March 22, 2000. U.S. 
Application numbers 09/274,078, 09/533,421 and 09/532,611 are 
5 herein incorporated by reference in their entirety but are not 
admitted to be prior art. 

The method and apparatus of the present invention restrict 
the assignment of VLANs to ensure that the assignment of VLANs 
does not produce a network topology having an arbitrary mix-and- 

10 match of VLANs on links as illustrated in FIG. 3. In fact, the 
method and apparatus assign VLANS so as to (1) restrict links 
within a NC from being identified by different sets of VLANs, (2) 
not inadvertently create a layer 2 forwarding loop, and (3) not 
inadvertently create a situation where a link will be blocked. 

15 Restricting the assignment of VLANs in accordance with the 

principles of this invention ensures that standard spanning tree 
protocols can be used for any network topology. 

Fig. 5 illustrates a flowchart of one embodiment of the 
method for restricting the assignment of VLANs. As illustrated, 

20 a user creates a network circuit (NC) at a particular Network 

Element (NE) (step 510). The user then assigns VLAN(s) to the NC 
(step 520). The assigned VLAN(s) are used to test if the 
assignment is valid. Thus, the assigned VLAN(s) is known as 
VLANSET_UNDER_TEST. A determination is then made as to whether 

25 the NE is assigned to other NCs (step 530) . If the NE is not 

part of any other NC, then the VLANSET_UNDER_TEST is valid and a 
new spanning tree should be assigned to the VLANSET_UNDER_TEST 
(step 540) . In this case, the new spanning tree could be 
anything as there is no spanning tree assigned to this NE at this 

30 point. 

If the NE is part of other NCs then VLANSETs for each of the 
other NCs is identified (Step 550) . A determination is then made 
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as to whether any of the other VLANSETs intersect entirely (i.e., 
are identical) with the VLANSET_UNDER_TEST (step 560). If one of 
the other VLANSETs intersect entirely with the 

VLANSET_UNDER_TEST, then trie VL AN S E T_UN DE R_T EST is valid and will 
5 run the same spanning tree as the VLANSET that is identical (step 
570). ' 

If none of the other VLANSETs intersect entirely with the 
VLANSET_UNDER_TEST, then a determination needs to be made if the 
VLANSET_UNDER_TEST is distinct from all of the other VLANSETs 
10 (step 580) . 

It would be obvious to one of ordinary skill in the art that 
rearranging the steps of this method is well within the scope of 
the current invention. Moreover, there are numerous other 
methods that could accomplish the same result which are all 
15 within the scope of the current invention. 

If all other VLANSETs are (distincti from VLANSET_UNDER_TEST, 
then the VLANSET_UNDER_TEST is valid. A new spanning tree will 
then be assigned to the VL AN S ET_UN DE R_T EST (step 540) . The new 
spanning tree could be anything that was not used before. 



VLANSETs, then the VLANSET_UNDER_TEST will be rejected (step 590) 
and the process will return to step 520. 

To explain each of the steps of the method of FIG. 5, 
several examples of adding a NC and assigning the NC a VLANSET 

25 follow. Fig. 6A illustrates a user at NE1 600 defining a first 
circuit CI that includes NE1 £00, NE2 610 and link 620 (step 
510). The user then assigns VLAN-A to CI (step 520). A 
determination is made that this NE is not part of any other NCs 
(step 530) . Therefore, the VLAN-A assignment is valid and a new 

30 spanning tree is assigned (step 540). As illustrated, spanning 
tree 1 is run for the assigned VLAN-A disseminating from NE1 600. 



20 



If the VLAN UNDER TEST 
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Fig. 6B illustrates a user at NE1 600 defining a second 
circuit C2 that includes NE1 600, NE3 630 and link 640 (step 
510). The user then assigns VLAN-B to C2 (step 520). A 
determination is made that this NE is also part of CI (step 530) 
5 that is carrying VLAN-A (step 550). A determination is made that 
VLAN-B for C2 is not identical to any of the other VLANs (i.e., 
VLAN-A for CI) (Step 560). A determination is then made that 
VLAN-B is cpmp 1 e t el y_s epa r a t e from VLAN-A (step 580) so that 
VLAN-B is acceptable and a new spanning tree is assigned (step 
10 540) . As illustrated, spanning tree 2 is run for VLAN-B 
disseminating from NE1 600. 

Fig. 6B also illustrates that C2 could be assigned VLAN-A. 
In this case, a determination would be made in step 560 that 
VLAN-A for C2 is identical to VLAN-A for CI (i.e., it is the only 
15 VLAN assigned) . Therefore, the VLAN-A for C2 would also be 

assigned spanning tree 1 (step 570). It should be noted that C2 
could not be assigned VLAN-A/B as that would create a topology 
with partially intersecting VLAN sets. 

Fig. 6C illustrates a user at NE1 600 defining a third 
20 circuit C2 that includes NE1 600, NE4 650 and link 660 (step 
510) . The user then assigns VLAN-C to C3 (step 520) . A 
determination is made that this NE is also part of CI and C2 
(step 530) that are defined as VLAN-A and VLAN-B respectively 
(step 550) . A determination is made that VLAN-C for C3 is not 
25 identical to any of the other VLANs (i.e., VLAN-A for CI or VLAN- 
B for C2) (Step 560) . A determination is then made that VLAN-C 
is completely separate from VLAN-A and VLAN-B (step 580) so that 
the VLAN-C is accepted and a new spanning tree is assigned (step 
540) . As illustrated the spanning tree assigned to VLAN-C 
30 disseminating from NE1 600 is spanning tree 3. 

Fig. 6C also illustrates that C3 could be defined as VLAN-A 
or VLAN-B. In this case, a determination would be made in step 
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• # 

560 that the VL AN S E T_U N D E R_T EST (VLAN-A or VLAN-B) for C3 is 
identical to VLAN-A for CI or VLAN-B for C2. Accordingly, the 
VLAN-A or VLAN-B for C3 would also be assigned spanning tree 1 or 
spanning tree 2 respectively (step 570) . It should be noted that 
5 C3 could not be assigned VLAN-A/B, VLAN-A/x, or VLAN-B /x f where x 
represents another designation. 

Fig. 6D illustrates a user at NE1 600 defining a fourth 
circuit C4 that includes NE1 600, link 620, NE2 610, link 640, 
and NE3 630 (step 510) . The user then assigns C4 as VLAN-D (step 

10 520) . A determination is made that this NE is also part of CI, 

C2 and C3 (step 530) that are defined as VLAN-A, VLAN-B and VLAN- 
C respectively (step 550) . A determination is made that VLAN-D 
for C4 is not identical to any of the other VLANs (step 560) . A 
determination is then made that VLAN-D is completely separate 

15 from VLAN-A, VLAN-B and VLAN-C (step 580) so that the VLAN-D is 

accepted and a new spanning tree is assigned. It should be noted 
that C4 could be designated A/x or B/x as that would result in 
the VALN not being completely separate from either VLAN-A or 
VLAN-B. 

20 Fig. 7 illustrates a first NE1 700 that has two circuits 

(CI, C2) already defined. CI includes NE3 710, link 740, NE1 
700, link 735, and NE2 705. C2 includes NE4 715, link 745, NE1 
700, link 750 and NE5 720. CI carries VLANs A and B, and C2 
carries VLANs C and D. The user now enters a third circuit C3 at 

25 NE1. C3 includes NE6 725, link 755, NE1 700, link 760 and NE7 
730. In this case, if the user identifies C3_as_arf^ 
V^ANSET^i.e. , VLAN-E, VLAN-F, VLAN-E/F) or any existing VLANSET 
(VLAN-A/B, VLAN-C/D) , the system will (^ccept) the VLAN assignment 
and run either a n^^sp^ni ng tr ee or an existing spanning tree 

30 for that VLAN or VLANSET, respectively. If the user assigned C3 
as any combination of existing VLANs (i.e., VLAN-A, VLAN-B, VLAN- 
C, VLAN-D, VLAN-A/C, VLAN-A/D, VLAN-B/C, VLAN-B/D) , the system 
would reject the VLAN assignment. 
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All of the examples illustrate the case where an operator 
defines a NC for the NE and assigns the NC a test VLAN (i.e., 
VLANSET_UNDER_TEST) and the system determines if the test VLAN is 
acceptable and runs a spanning tree associated with the 
5 particular VLAN. It is well within the scope of the current 

invention to have the system tell the operator what VLANs can be 
assigned, after the user defines the NC, and have the user then 
select from the available VLANs. It is also within the scope of 
the current invention for the NE to inform the user of which VLAN 
10 assignments are not valid so that the user can select some other 
VLAN assignment. It is also understood that the system may 
inform the user that a particular NC cannot be defined if 
sufficient bandwidth is not available. 

The above functions can be implemented as a set of computer 
15 instructions stored on a computer readable medium. 

Although this invention has been illustrated by reference to 
specific embodiments, it will be apparent to those of ordinary 
skill in the art that various changes and modifications may be 
made, which clearly fall within the scope of the invention. The 
20 invention is intended to be protected broadly within the spirit 
and scope of the appended claims. , 
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